[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Logging question
Ski Kacoroski wrote:
Howard Chu wrote:
Ski Kacoroski wrote:
Hmmm, I am still missing something here. I changed the ordering
with the overlay glue option and I still get almost duplicate (only
the reqEnd time is slightly different) entries in both log databases
when I search create or search for entries in
ou=hosts,dc=nsd,dc=org. It does work the other way (e.g. if I search
ou=people,dc=nsd,dc=org, I do not get an entry in the
ou=hosts,dc=nsd,dc=org log database).
Interesting. Actually with the default ordering it works about as well
as it's going to. Any subtree search from the top database will
generate log records in both databases since the subtree search is
propagated all the way down. But anything else that only affects a
single entry will only generate logs in one place or the other.
I bound as "uid=test,ou=hosts,dc=nsd,dc=org" subordinate database. The
log entries in the superior database when I changed "uid=test" entry are:
dn: reqStart=20060616233810.000000Z,cn=nsdlog
objectClass: auditSearch
reqStart: 20060616233810.000000Z
reqEnd: 20060616233810.000002Z
reqType: search
reqSession: 4
reqAuthzID: uid=test,ou=hosts,dc=nsd,dc=org
reqDN: ou=hosts,dc=nsd,dc=org
reqResult: 0
reqScope: one
reqDerefAliases: finding
reqAttrsOnly: FALSE
reqFilter: (uid=test)
reqEntries: 1
reqTimeLimit: 3600
reqSizeLimit: 10000
dn: reqStart=20060616233819.000000Z,cn=nsdlog
objectClass: auditModify
reqStart: 20060616233819.000000Z
reqEnd: 20060616233819.000002Z
reqType: modify
reqSession: 4
reqAuthzID: uid=test,ou=hosts,dc=nsd,dc=org
reqDN: uid=test,ou=hosts,dc=nsd,dc=org
reqResult: 0
reqMod: nsdContact:= test
reqMod: entryCSN:= 20060616233819Z#000000#00#000000
reqMod: modifiersName:= uid=test,ou=hosts,dc=nsd,dc=org
reqMod: modifyTimestamp:= 20060616233819Z
while in the subordinate access log they were:
dn: reqStart=20060616233810.000000Z,cn=nsdhostslog
objectClass: auditSearch
reqStart: 20060616233810.000000Z
reqEnd: 20060616233810.000001Z
reqType: search
reqSession: 4
reqAuthzID: uid=test,ou=hosts,dc=nsd,dc=org
reqDN: ou=hosts,dc=nsd,dc=org
reqResult: 0
reqScope: one
reqDerefAliases: finding
reqAttrsOnly: FALSE
reqFilter: (uid=test)
reqEntries: 1
reqTimeLimit: 3600
reqSizeLimit: 10000
dn: reqStart=20060616233819.000000Z,cn=nsdhostslog
objectClass: auditModify
reqStart: 20060616233819.000000Z
reqEnd: 20060616233819.000001Z
reqType: modify
reqSession: 4
reqAuthzID: uid=test,ou=hosts,dc=nsd,dc=org
reqDN: uid=test,ou=hosts,dc=nsd,dc=org
reqResult: 0
reqMod: nsdContact:= test
reqMod: entryCSN:= 20060616233819Z#000000#00#000000
reqMod: modifiersName:= uid=test,ou=hosts,dc=nsd,dc=org
reqMod: modifyTimestamp:= 20060616233819Z
--
"When we try to pick out anything by itself, we find it
connected to the entire universe" John Muir
Chris "Ski" Kacoroski, ski@nsd.org, 206-501-9803